Bounty Case Files #01How multiple trust-boundary failures allowed anonymous access to premium functionality in a production APIBy Ahmed Waleed | Bug Bounty HunterTL;DRWhile assessing a public enterprise SaaS API, I discovered a complete breakdown of authentication and authorization.By chaining multiple trust-boundary failures, an unauthenticated...